[TheViniAlmeida]

Add an optional local dashboard for launch-selected profiles and projects. Browse sessions and literal previews, review native transfers, edit a complete handoff, return the current worked session under a new identity, inspect durable operations and view recorded usage observations.

The dashboard binds only to loopback and starts explicitly through smigrate web. Its default run is readonly. Native publication, handoff, return and each recovery service have separate explicit launch flags; HTTP accepts opaque launch-owned selections rather than paths, environment or executable values. Private capabilities stay with the worker through preparation, confirmation and cleanup. Revocation before publication cancels preparation; after publication starts, the owning operation retains its guards and reports the original durable outcome.

Usage counters retain provenance and unknown dimensions; native totals, cost and context percentages remain unknown when not proved. Handoff is derived user context. OpenCode user handoffs retain PARTIAL coverage, full return to OpenCode remains blocked, and in-place update remains unavailable because native exclusion/CAS has not been demonstrated.

Validation completed:

• Full integrated local suite with web/TUI: 3,753 passed, 82 external-client prerequisites skipped.
• Current actual HTTP runtime: 25 passed with loaded worker methods pinned; real worked-source full return TRACKED and handoff return DERIVED.
• Runtime review: original five contraprobes and 23 current regressions passed; cancellation before review fixed and native/service entry boundaries remain distinct.
• Private sandboxed Chrome: full transfer, literal editable handoff publication, usage, operation inspection, logout/replay denial, empty browser storage and mobile layout passed; listener/process closed.
• Independent integrated review: 43 changed files, preserved native proof guards, packaged assets and optional dependencies approved.
• Wheel/sdist built; 83 packaged Python/TCSS/assets match current reviewed source. No core runtime dependencies.
• Installed-wheel functional gate: 104 passed with no skips. The TUI tests now wait for actual profile-load completion before sending Ctrl+H; independent real-keyboard probes prove the existing busy guard blocks before completion and opens afterward. Product files remain unchanged.
• Branch aligned with the merged handoff baseline; all 74 owned source hashes preserved and the 43-file diff exactly matches the integrated review plus the reviewed test readiness change.

Earlier installed Pilot opening failures and an intermittent post-publication finalization failure remain in the validation receipts, with their individual causes unconfirmed. The scoped readiness proof, independent review and final clean installed gate passed without weakening publication guards. Exact-head CI is required before merge.